network-security Skill

Goal

This skill defines the perimeter and internal segmentation of the infrastructure.

Steps

1. VPC Architecture

Public Subnet

• Contains: Load Balancers (ALB), NAT Gateways, Bastion Hosts.
• Access: 0.0.0.0/0 (Internet) on ports 80/443.

Private Subnet

• Contains: Application Servers, Runners.
• Access: Only from Public Subnet (Load Balancer). NO direct Internet ingress.

Data Subnet (Isolated)

• Contains: Databases, Redis, Vault.
• Access: Only from Private Subnet (App Servers).
• Egress: None (or highly restricted).